Omada 3-in-1 Gigabit VPN Gateway
- 3-in-1 Gateway: Integrates 8× PoE+ ports with 110W PoE budget and centralized management capability. Up to 1 gateway and total 12 switches and access points can be centrally managed.
- Up to 12× Gigabit ports bring high-speed network.
- Up to 4× WAN Ethernet ports for a stable network.
- Centralized Management: Cloud access and the Omada app for easy management.
- Highly Secure VPN: Supports IPsec VPN / OpenVPN / L2TP / PPTP / WireGuard / SSL VPN.§
- Easy Installation: Compact, fanless design supports flexible mounting options — desktop, wall, or rack (rackmount kit sold separately).
Learn more about Omada Cloud SDN>
<p><img alt="" src="https://static.tp-link.com/upload/product/ER7212PC_EU_2.0_In_the_Box_20250407061703v.jpg" /></p>
SECURITY | |
---|---|
DPI | Supported by v2 and above: • Deep Packet Inspection • Support 2421 type Applications • Max Throughput (Upload / Download) 942.7Mbps/937.3Mbps |
Access Control | Source/Destination IP Based Access Control |
Filtering | URL Filtering |
ARP Inspection | Sending GARP PacketsIP-MAC Binding |
Attack Defense | TCP/UDP/ICMP Flood DefenseBlock TCP Scan (Stealth FIN/Xmas/Null)Block Ping from WAN |
HARDWARE FEATURES | |
---|---|
Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, SNMP |
Interface | • 2 Gigabit SFP WAN/LAN ports**• 1 Gigabit WAN port• 1 Gigabit LAN/WAN port• 8 Gigabit LAN ports |
Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) • EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m) • EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m) |
Fan Quantity | Fanless |
Button | Reset Button |
Power Supply | 53.5VDC/2.43A Adapter |
PoE Budget | 8 ports PoE+ output, 110 W PoE Budget |
Flash | 32Mbit Nor+8GB eMMC |
DRAM | 2 GB DDR4 |
LED | PWR, SYS, CLOUD, PoE Max, SFP 1, SFP 2, WAN (Speed, Link/Act), LAN (Speed, Link/Act) |
Dimensions ( W x D x H ) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) |
Protection | 6kV surge protection |
Enclosure | Steel |
Mounting | • Desktop • Wall-mount • Rack-mount (rackmount kit sold separately) |
Max. Power Consumption | 131 W (110 V/60 Hz) (With 110 W PD connected |
PERFORMANCE | |
---|---|
Concurrent Session | 50,000 |
New Sessions /Second | 3,800 |
NAT (Static IP) | 940.2 Mbps / 947.5 Mbps |
NAT(DHCP) | 947.8 Mbps / 948.6 Mbps |
NAT(PPPoE) | 943.1 Mbps / 942.6 Mbps |
NAT (L2TP) | 898.4 Mbps / 915.8 Mbps |
NAT (PPTP) | 909.7 Mbps / 912.8 Mbps |
IPsec VPN Throughput | ESP-SHA1-AES256: 984.7 Mbps, ESP-SHA2-AES256: 990.5 Mbps, ESP-SHA384-AES256: 983.9 Mbps, ESP-SHA512-AES256: 985.8 Mbps |
OpenVPN | 233.1 Mbps |
L2TP VPN Throughput | Unencrypted: 1,273.9 Mbps Encrypted: 851.8 Mbps |
PPTP VPN Throughput | Unencrypted: 1293.5 MbpsEncrypted: 297.1 Mbps |
66 Byte Packet Forwarding Rate | 1,453,459 pps / 1,453,459 pps |
1,518 Byte Packet forwarding rate | 81,272 pps / 81,272 pps |
BASIC FUNCTIONS | |
---|---|
WAN Connection Type | • Static IP • Dynamic IP • PPPoE • PPTP • L2TP |
MAC Clone | Modify WAN MAC Address |
DHCP | • DHCP Server • DHCP Options Customization • DHCP Address Reservation • Multi-IP Interfaces • Multi-Net DHCP |
IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode |
VLAN | 802.1Q VLAN |
IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
Advanced Features | |
---|---|
Access Control | • Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL |
Advanced Routing | • Static Routing• Policy Routing |
Bandwidth Control | IP-based Bandwidth Control |
Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup• Online Detection |
NAT | • Multi-Net NAT • One-to-One NAT • Port Forwarding • NAT-DMZ • FTP/H.323/SIP/IPSec/PPTP ALG • UPnP |
Session Limit | IP-based Session Limit |
VPN | |
---|---|
SSL VPN | 80 Tunnels |
IPsec VPN | • 20 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS) |
PPTP VPN | • PPTP VPN Server • PPTP VPN Client (10) • 16 Tunnels • PPTP with MPPE Encryption |
L2TP VPN | • L2TP VPN Server • L2TP VPN Client (10) • 16 Tunnels • L2TP over IPSec |
OpenVPN | • OpenVPN Server • OpenVPN Client (10) • 16 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode |
WireGuard VPN | √ |
AUTHENTICATION | |
---|---|
Web Authentication | • No Authentication • Simple Password • Hotspot (Local User / Voucher/ SMS / Radius) • External Radius Sever • External Portal Sever |
Management Features | |
---|---|
Omada App | Yes. |
Centralized Management | Management of up to 2 Omada switches, and 10 Omada access points |
Cloud Access | Yes. |
Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
Maintenance | • Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute) • NTP Synchronize • Port Mirroring • Syslog Support |
Zero-Touch Provisioning | - |
Management Features | • Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration |
OTHERS | |
---|---|
Certification | CE, FCC, RoHS |
Package Content | • ER7212PC• Power Adapter• Power Cord• Quick Installation Guide |
System Requirements | • Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11 • MAC OS, NetWare, UNIX or Linux |
Environment | Operating Temperature: -5 °C to 45 °CStorage Temperature: -40 °C to 70 °COperating Humidity: 10% to 90% non-condensingStorage Humidity: 5% to 90% non-condensing |
*PoE budget calculations are based on laboratory testing. Actual PoE power budget is not guaranteed and will vary as a result of client limitations and environmental factors.
**The SFP port of ER7212PC does not support direct-attach cable connection, including SM5220-1M (TL-SM5220-1M), SM5220-3M (TL-SM5220-3M), etc.
***DPI is supported by ER7212PC v2 and above.
§ER7212PC can work as a VPN client and can connect with up to 10 VPN servers.